Accton VS4512DC - Manuals

Contents x IP Interface Commands 4-166 Basic IP Configuration 4-166 ip address 4-167 ip default-gateway 4-168 show ip interface 4-168 show ip redirects 4-169 ping 4-169 Appendix A: Software Specifications A-1 Software Features A-1 Management Features A-2 Standards A-2Management Information Bases A-3...

1-1 Chapter 1: Introduction The switch provides a broad range of features for Layer 2 switching. It includes a management agent that allows you to configure the features listed in this manual. The default configuration can be used for most of the features provided by this switch. However, there are ...

Introduction 1-2 Description of Software Features The switch provides a wide range of advanced performance enhancing features. Flow control eliminates the loss of packets due to bottlenecks caused by port saturation. Broadcast storm suppression prevents broadcast traffic storms from engulfing the ne...

Description of Software Features 1-3 Port Mirroring – The switch can unobtrusively mirror traffic from any port to a monitor port. You can then attach a protocol analyzer or RMON probe to this port to perform traffic analysis and verify connection integrity. Port Trunking – Ports can be combined int...

Introduction 1-4 Virtual LANs – The switch supports up to 255 VLANs. A Virtual LAN is a collection of network nodes that share the same collision domain regardless of their physical location or connection point in the network. The switch supports tagged VLANs based on the IEEE 802.1Q standard. Membe...

System Defaults 1-5 System Defaults The switch’s system defaults are provided in the configuration file “Factory_Default_Config.cfg.” To reset the switch defaults, this file should be set as the startup configuration file (page 3-17). The following table lists some of the basic system defaults. Func...

2-1 Chapter 2: Initial Configuration Connecting to the Switch Configuration Options The switch includes a built-in network management agent. The agent offers a variety of management options, including SNMP, RMON and a Web-based interface. A PC may also be connected directly to the switch for configu...

Initial Configuration 2-2 • Globally set broadcast storm control• Display system information and statistics Required Connections The switch provides an RS-232 serial port that enables a connection to a PC or terminal for monitoring and configuring the switch. A null-modem console cable is provided w...

Basic Configuration 2-3 Remote Connections Prior to accessing the switch’s onboard agent via a network connection, you must first configure it with a valid IP address, subnet mask, and default gateway using a console connection, DHCP or BOOTP protocol. The IP address for this switch is assigned by D...

Initial Configuration 2-4 Setting Passwords Note: If this is your first time to log into the CLI program, you should define new passwords for both default user names using the “username” command, record them and put them in a safe place. Passwords can consist of up to 8 alphanumeric characters and a...

Basic Configuration 2-5 Before you can assign an IP address to the switch, you must obtain the following information from your network administrator:• IP address for the switch • Default gateway for the network • Network mask for this network To assign an IP address to the switch, complete the follo...

Initial Configuration 2-6 5. Wait a few minutes, and then check the IP configuration settings by typing the “show ip interface” command. Press <Enter>. 6. Then save your configuration changes by typing “copy running-config startup-config.” Enter the startup file name and press <Enter>. E...

Basic Configuration 2-7 To configure a community string, complete the following steps: 1. From the Privileged Exec level global configuration mode prompt, type “snmp-server community string mode ,” where “string” is the community access string and “mode” is rw (read/write) or ro (read only). Press &...

Initial Configuration 2-8 Managing System Files The switch’s flash memory supports three types of system files that can be managed by the CLI program, Web interface, or SNMP. The switch’s file system allows files to be uploaded and downloaded, copied, deleted, and set as a start-up file. The three t...

3-1 Chapter 3: Configuring the Switch Using the Web Interface This switch provides an embedded HTTP Web agent. Using a Web browser you can configure the switch and view statistics to monitor network activity. The Web agent can be accessed by any computer on the network using a standard Web browser (...

Configuring the Switch 3-2 Navigating the Web Browser Interface To access the web-browser interface you must first enter a user name and password. The administrator has Read/Write access to all configuration parameters and statistics. The default user name and password for the administrator is “admi...

Navigating the Web Browser Interface 3-3 Notes: 1. To ensure proper screen refresh, be sure that Internet Explorer 5.x is configured as follows: Under the menu “Tools / Internet Options / General / Temporary Internet Files / Settings,” the setting for item “Check for newer versions of stored pages” ...

Basic Configuration 3-7 Basic Configuration Displaying System Information You can easily identify the system by displaying the device name, location and contact information. Field Attributes • System Name – Name assigned to the switch system. • Object ID – MIB II object ID for switch’s network manag...

Configuring the Switch 3-8 Web – Click System, System Information. Specify the system name, location, and contact information for the system administrator, then click Apply. (This page also includes a Telnet button that allows access to the Command Line Interface via Telnet.) CLI – Specify the hostn...

Basic Configuration 3-9 Displaying Switch Hardware/Software Versions Use the Switch Information page to display hardware/firmware version numbers for the main board and management software, as well as the power status of the system. Field AttributesMain Board • Serial Number – The serial number of t...

Configuring the Switch 3-10 CLI – Use the following command to display version information. Displaying Bridge Extension Capabilities The Bridge MIB includes extensions for managed devices that support Multicast Filtering, Traffic Classes, and Virtual LANs. You can access these extensions to display ...

Basic Configuration 3-11 Web – Click System, Bridge Extension. CLI – Enter the following command. Setting the Switch’s IP Address An IP address may be used for management access to the switch over your network. By default, the switch uses DHCP to assign IP settings to VLAN 1 on the switch. If you wi...

Basic Configuration 3-13 CLI – Specify the management interface, IP address and default gateway. Using DHCP/BOOTP If your network provides DHCP/BOOTP services, you can configure the switch to be dynamically configured by these services. Web – Click System, IP Configuration. Specify the VLAN to which...

Configuring the Switch 3-14 Renewing DCHP – DHCP may lease addresses to clients indefinitely or for a specific period of time. If the address expires or the switch is moved to another network segment, you will lose management access to the switch. In this case, you can reboot the switch or submit a ...

Basic Configuration 3-15 Note: Up to two copies of the system software (i.e., the runtime firmware) can be stored in the file directory on the switch. The currently designated startup version of this file cannot be deleted. Downloading System Software from a Server When downloading runtime code, you...

Configuring the Switch 3-16 CLI – Enter the IP address of the TFTP server, select “config” or “opcode” file type, then enter the source and destination file names, set the new file to start up the system, and then restart the switch. Saving or Restoring Configuration Settings You can upload/download...

Basic Configuration 3-17 Setting the Startup Configuration File If you download to a new file name, select the new file from the drop-down list for Startup Configuration File, and press Apply Changes. To use the new settings, reboot the system via the System/Reset menu. CLI – Enter the IP address of...

Configuring the Switch 3-18 Resetting the System Web – Click System, Reset. Click the Reset button to restart the switch. CLI – Use the reload command to restart the switch. Note: When restarting the system, it will always run the Power-On Self-Test. Setting the System Clock Simple Network Time Prot...

Basic Configuration 3-19 • SNTP Poll Interval – Sets the interval between sending requests for a time update from a time server when set to SNTP Client mode. (Range: 16-16284 seconds; Default: 16 seconds) • SNTP Server – In unicast mode, sets the IP address for up to three time servers. The switch a...

Configuring the Switch 3-20 Web – Select SNTP, Clock Time Zone. Set the offset for your time zone relative to the UTC, and click Apply. CLI - This example shows how to set the time zone for the system clock. Simple Network Management Protocol Simple Network Management Protocol (SNMP) is a communicat...

Simple Network Management Protocol 3-21 Setting Community Access Strings You may configure up to five community strings authorized for management access. All community strings used for IP Trap Managers should be listed in this table. For security reasons, you should consider removing the default str...

Configuring the Switch 3-22 Specifying Trap Managers and Trap Types Traps indicating status changes are issued by the switch to specified trap managers. You must specify trap managers so that key events are reported by this switch to your management station (using network management platforms such a...

Simple Network Management Protocol 3-23 Filtering Addresses for SNMP Client Access The switch allows you to create a list of up to 16 IP addresses or IP address groups that are allowed access to the switch via SNMP management software. Command Usage • To specify the clients allowed SNMP access, ente...

Configuring the Switch 3-24 CLI – This example allows SNMP access for a specific client. User Authentication. Use the Passwords or RADIUS/TACACS+ menu to restrict management access based on specified user names and passwords. You can manually configure access rights on the switch (Passwords menu), o...

User Authentication. 3-25 CLI – Assign a user name to access-level 15 (i.e., administrator), then specify the password. Configuring Local/Remote Logon Authentication Use the Authentication Settings menu to restrict management access based on specified user names and passwords. You can manually confi...

Configuring the Switch 3-28 Telnet Settings Telnet access to the switch can be enabled via the Web or CLI. Web – Click Security, Telnet Settings, then check the checkbox to enable access via Telnet (i.e., a virtual terminal). CLI – This example enables Telnet access to the switch. Configuring HTTPS ...

User Authentication. 3-29 Command Attributes • HTTPS Status – Allows you to enable/disable the HTTPS server feature on the switch. (Default: Enabled) • Change HTTPS Port Number – Specifies the UDP port number used for HTTPS/ SSL connection to the switch’s web interface. (Default: Port 443) Web – Cli...

Configuring the Switch 3-30 Configuring the Secure Shell The Berkley-standard includes remote access tools originally designed for Unix systems. Some of these tools have also been implemented for Microsoft Windows and other environments. These tools, including commands such as, rsh (remote shell), a...

User Authentication. 3-31 CLI – This example enables SSH, sets the authentication parameters, and displays the current configuration. It shows that the administrator has made a connection via SHH, and then disabled this connection. Configuring Port Security Port security is a feature that allows you...

User Authentication. 3-33 Configuring 802.1x Port Authentication Network switches can provide open and easy access to network resources by simply attaching a client PC. Although this automatic configuration and access is a desirable feature, it also allows unauthorized personnel to easily intrude an...

Configuring the Switch 3-34 Displaying 802.1x Global Settings The dot1x protocol includes global parameters that control the client authentication process that runs between the client and the switch (i.e., authenticator), as well as the client identity lookup process that runs between the switch and...

Configuring the Switch 3-36 Configuring 802.1x Global Settings The dot1x protocol includes global parameters that control the client authentication process that runs between the client and the switch (i.e., authenticator), as well as the client identity lookup process that runs between the switch an...

User Authentication. 3-37 CLI – This enables re-authentication and sets all of the global parameters for 802.1x. Configuring Port Authorization Mode When dot1x is enabled, you need to specify the dot1x authentication mode configured for each port. Command Attributes • Status – Indicates if authentic...

Configuring the Switch 3-38 CLI – This example sets the authentication mode to enable 802.1x on port 2, and allows up to ten clients to connect to this port. Displaying 802.1x Statistics This switch can display statistics for dot1x protocol exchanges for any port. Statistical Values Web – Select Sec...

Port Configuration 3-39 CLI – This example displays the 802.1x statistics for port 4. Port Configuration Displaying Connection Status You can use the Port Information or Trunk Information pages to display the current connection status, including link state, speed/duplex mode, flow control, and auto-...

Configuring the Switch 3-40 • Max MAC Count – Shows the maximum number of MAC address that can be learned by a port. (0 - 20 addresses) • Speed Duplex Status – Shows the current speed and duplex mode. • Flow Control Status – Indicates the type of flow control currently in use. (IEEE 802.3x, Back-Pre...

Configuring the Switch 3-42 CLI – This example shows the connection status for Port 5. Configuring Interface Connections You can use the Port Configuration or Trunk Configuration page to enable/disable an interface, set auto-negotiation and the interface capabilities to advertise, or manually fix th...

Port Configuration 3-43 • Autonegotiation (Port Capabilities) – Allows auto-negotiation to be enabled/ disabled. When auto-negotiation is enabled, you need to specify the capabilities to be advertised. When auto-negotiation is disabled, you can force the settings for speed, mode, and flow control.Th...

Configuring the Switch 3-44 CLI – Select the interface, and then enter the required settings. Creating Trunk Groups You can create multiple links between devices that work as one virtual, aggregate link. A port trunk offers a dramatic increase in bandwidth for network segments where bottlenecks exis...

Port Configuration 3-45 Statically Configuring a Trunk Command Usage • When configuring static trunks, you may not be able to link switches of different types, depending on the manufacturer’s implementation. However, note that the static trunks on this switch are Cisco EtherChannel compatible. • To ...

Configuring the Switch 3-46 CLI – This example creates trunk 2 with ports 13 and 14. Just connect these ports to two static trunk ports on another switch to form a trunk. Enabling LACP on Selected Ports Command Usage • To avoid creating a loop in the network, be sure you enable LACP before connectin...

Configuring the Switch 3-48 Setting Broadcast Storm Thresholds Broadcast storms may occur when a device on your network is malfunctioning, or if application programs are not well designed or properly configured. If there is too much broadcast traffic on your network, performance can be severely degr...

Port Configuration 3-49 CLI – Specify any interface, and then enter the threshold. The following disables broadcast storm control for port 1, and then sets broadcast suppression at 600 packets per second for port 2. This threshold will then apply to all ports with broadcast storm control enabled. Co...

Configuring the Switch 3-50 Web – Click Port, Mirror. Specify the source port, the traffic type to be mirrored, and the target port, then click Add . CLI – Use the interface command to select the monitor port, then use the port monitor command to specify the source port. Note that default mirroring ...

Port Configuration 3-51 Web - Click Rate Limit, Input/Output Port/Trunk Configuration. Set the Input Rate Limit Status or Output Rate Limit Status, then set the rate limit for the individual interfaces, and click Apply. CLI - This example sets the rate limit for input and output traffic passing thro...

Configuring the Switch 3-56 VDSL Configuration You can configure and display communication parameters for VDSL and Ethernet ports on the switch and connected CPEs. VDSL Global Configuration This Web page assigns the same profile to each VDSL switch port. Details of these profiles are given in the ta...

Configuring the Switch 3-58 VDSL Port Configuration You can enable/disable a selected port, enable/disable Remote Digital Loopback (RDL), set the optimal transmission rate, and configure a profile for the selected port. Command Attributes • Active Status – Check this box to enable the selected port....

VDSL Configuration 3-59 Noise margins should be configured to a level appropriate to the actual noise level of the environment. A noisier environment requires a higher noise margin to ensure a stable link. The noise margin only comes into effect after a link is activated. Increasing the noise margin...

VDSL Configuration 3-61 The following example shows rate adaption enabled for port 1. The following example configures VDSL port 1 with an upstream noise margin of 6, and a downstream noise margin of 6. The following example configures VDSL port 1 with: • M - downstream value: 16, Upstream value: 8•...

Configuring the Switch 3-62 - PBO – Indicates the status of the power back-off mechanism (on/off). If PBO is enabled, the power of transmission from the port will automatically be adjusted to ensure that the signal successfully reaches the receive port. - Rate Adaptation – The data rate on a VDSL li...

Configuring the Switch 3-64 Displaying VDSL Port Ethernet Statistics VDSL Port Ethernet Statistics display key statistics for an interface. Web – Click VDSL, VDSL Port Ethernet Statistics.

VDSL Configuration 3-65 CLI – Use the show interfaces counters command. Example VDSL Line Configuration Command Attributes • Line – Select the VDSL line for configuration from the drop-down list. • Local/Remote – In this version this may only be set to Local, indicating that the line configuration a...

Configuring the Switch 3-66 • Config Profile – In this version, only “DEFVAL” is displayed. In future versions, a drop-down list of all configurable VDSL profiles will be displayed in this field. • Alarm Config Profile – The alarm profile is pre-configured to send trap messages via SNMP protocol to ...

VDSL Configuration 3-69 VDSL Performance Monitor Information This screen displays line and channel performance data information since the switch was last reset, during the current 15 minute interval, and during the current day. Command Attributes • Line – Select the VDSL line from the drop-down list...

VDSL Configuration 3-71 CLI – Use the show controllers efm current-performance command. Example Console#show controllers efm current-performance vtu-c 1/1 4-120 VDSL_PERF_DATA_ENTRY : Ethernet 1/1 Loss of Framing 0Ethernet 1/1 Loss of Signal 0Ethernet 1/1 Loss of Power 0Ethernet 1/1 Loss of Link 0Et...

Configuring the Switch 3-72 Monitoring VDSL Performance History This page displays line and channel performance data information during selected 15 minute intervals over the last 24 hours of switch operation, and during selected 1-day intervals from the current day to 30 days ago. Command Attributes...

VDSL Configuration 3-73 Web – Click VDSL, Performance Monitor History. Note: The parameters described above are not displayed in the CLI for periods before the current 15 minute, or 24 hour interval. To display these parameters during the current 15 minute, or 24 hour period see “VDSL Performance Mo...

Configuring the Switch 3-74 Web – Click Address Table, Static Addresses. Specify the interface, the MAC address and VLAN, then click Add Static Address. CLI – This example adds an address to the static address table, but sets it to be deleted when the switch is reset. Displaying the Address Table Th...

VDSL Configuration 3-75 Web – Click Address Table, Dynamic Addresses. Specify the search type (i.e., mark the Interface, MAC Address, or VLAN checkbox), select the method of sorting the displayed addresses, and then click Query . CLI – This example also displays the address table entries for port 1....

Configuring the Switch 3-76 Web – Click Address Table, Address Aging. Specify the new aging time, click Apply . CLI – This example sets the aging time to 400 seconds. Spanning Tree Algorithm Configuration The Spanning Tree Algorithm (STA) can be used to detect and disable network loops, and to provi...

Spanning Tree Algorithm Configuration 3-77 If a bridge does not get a Hello BPDU after a predefined interval (Maximum Age), the bridge assumes that the link to the Root Bridge is down. This bridge will then initiate negotiations with other bridges to reconfigure the network to reestablish a valid ne...

Spanning Tree Algorithm Configuration 3-79 CLI – This command displays global STA settings, followed by settings for each port. Note: The current root port and current root cost display as zero when this device is not connected to the network. Configuring Global Settings Global settings apply to the...

Spanning Tree Algorithm Configuration 3-81 Web – Click Spanning Tree, STA, Configuration. Modify the required attributes, and click Apply. CLI – This example enables Spanning Tree Protocol, and then configures the STA parameters. Displaying Interface Settings The STA Port Information and STA Trunk I...

Spanning Tree Algorithm Configuration 3-83 These additional parameters are only displayed for the CLI: • Admin status – Shows if this interface is enabled. • Path Cost – This parameter is used by the STA to determine the best path between devices. Therefore, lower values should be assigned to ports ...

Configuring the Switch 3-84 Web – Click Spanning Tree, STA, Port Information or STA Trunk Information. CLI – This example shows the STA attributes for port 5. Configuring Interface Settings You can configure RSTP attributes for specific interfaces, including port priority, path cost, link type, and ...

Spanning Tree Algorithm Configuration 3-85 • Trunk – Indicates if a port is a member of a trunk. (STA Port Configuration only) The following interface attributes can be configured: • Priority – Defines the priority used for this port in the Spanning Tree Protocol. If the path cost for all ports on a...

Configuring the Switch 3-86 • Migration – If at any time the switch detects STP BPDUs, including Configuration or Topology Change Notification BPDUs, it will automatically set the selected interface to forced STP-compatible mode. However, you can also use the Protocol Migration button to manually re...

VLAN Configuration 3-87 VLANs provide greater network efficiency by reducing broadcast traffic, and allow you to make network changes without having to update IP addresses or IP subnets. VLANs inherently provide a high level of network security since traffic must pass through a configured Layer 3 li...

Configuring the Switch 3-88 Port Overlapping – Port overlapping can be used to allow access to commonly shared network resources among different VLAN groups, such as file servers or printers. Note that if you implement VLANs which do not overlap, but still need to communicate, you can connect them b...

VLAN Configuration 3-89 CLI – Enter the following command. Displaying Current VLANs The VLAN Current Table shows the current port members of each VLAN and whether or not the port supports VLAN tagging. Ports assigned to a large VLAN group that crosses several switches should use VLAN tagging. Howeve...

VLAN Configuration 3-91 Creating VLANs Use the VLAN Static List to create or remove VLAN groups. To propagate information about VLAN groups used on this switch to external network devices, you must specify a VLAN ID for each of these groups. Command Attributes • Current – Lists all the current VLAN ...

Configuring the Switch 3-92 Adding Static Members to VLANs (VLAN Index) Notes: 1. Use the VLAN Static Table to configure port members for the selected VLAN index. Assign ports as tagged if they are connected to 802.1Q VLAN compliant devices, or untagged they are not connected to any VLAN-aware devic...

VLAN Configuration 3-93 Web – Click VLAN, 802.1Q VLAN, Static Table. Select a VLAN ID from the scroll-down list. Modify the VLAN name and status if required. Select the membership type by marking the appropriate radio button in the list of ports or trunks. Click Apply. CLI – The following example ad...

Configuring the Switch 3-94 Web – Open VLAN, 802.1Q VLAN, Static Membership. Select an interface from the scroll-down box (Port or Trunk). Click Query to display membership information for the interface. Select a VLAN ID, and then click Add to add the interface as a tagged member, or click Remove to...

Configuring the Switch 3-96 Web – Click VLAN, 802.1Q VLAN, Port Configuration or VLAN Trunk Configuration. Fill in the required settings for each interface, click Apply. CLI – This example sets port 3 to accept only tagged frames, assigns PVID 3 as the native VLAN ID, sets the GARP timers, and then ...

VLAN Configuration 3-97 Enabling Private VLANs Use the Private VLAN Status page to enable/disable the Private VLAN function. Web – Click VLAN, Private VLAN, Status. Select Enable or Disable from the scroll-down box, and click Apply. CLI – This example enables private VLANs. Configuring Uplink and Do...

Configuring the Switch 3-98 CLI – This example configures ports 13 and 14 as uplink ports and ports 1-8 as downlink ports. Class of Service Configuration Class of Service (CoS) allows you to specify which data packets have greater precedence when traffic is buffered in the switch due to congestion. ...

Configuring the Switch 3-100 Mapping CoS Values to Egress Queues This switch processes Class of Service (CoS) priority tagged traffic by using four priority queues for each port, with service schedules based on strict or Weighted Round Robin (WRR). Up to eight separate traffic priorities are defined...

Class of Service Configuration 3-101 Web – Click Priority, Traffic Classes. Mark an interface and click Select to display the current mapping of CoS values to output queues. Assign priorities to the traffic classes (i.e., output queues) for the selected interface, then click Apply. CLI – The followi...

Configuring the Switch 3-102 CLI – The following sets the queue mode to strict priority service mode. Setting the Service Weight for Traffic Classes This switch uses the Weighted Round Robin (WRR) algorithm to determine the frequency at which it services each priority queue. As described in “Mapping...

Class of Service Configuration 3-103 CLI – The following example shows how to assign WRR weights to each of the priority queues. Mapping Layer 3/4 Priorities to CoS Values This switch supports several common methods of prioritizing layer 3/4 traffic to meet application requirements. Traffic prioriti...

Configuring the Switch 3-104 CLI – The following example enables IP Precedence service on the switch. Mapping IP Precedence The Type of Service (ToS) octet in the IPv4 header includes three precedence bits defining eight different priority levels ranging from highest priority for network control pac...

Class of Service Configuration 3-105 CLI – The following example globally enables IP Precedence service on the switch, maps IP Precedence value 1 to CoS value 0 (on port 1), and then displays the IP Precedence settings. * Mapping specific values for IP Precedence is implemented as an interface confi...

Class of Service Configuration 3-107 Mapping IP Port Priority In the IP Port Priority page, for each switch port or trunk, you can map IP ports (TCP/UDP ports) to the switch’s 4 traffic class queues. Command Attributes • Current IP Port Table – displays a list of IP ports with their mapped class of ...

Configuring the Switch 3-108 CLI – The following example shows IP Port 80 mapped to CoS value 0 for ethernet port 1. Copy Priority Settings In the Copy Settings page you can copy the priority settings from a selected port or trunk to another selected port or trunk. Command Attributes • Source Interf...

Multicast Filtering 3-109 Multicast Filtering Multicasting is used to support real-time applications such as videoconferencing or streaming audio. A multicast server does not have to establish a separate connection with each client. It merely broadcasts its service to the network, and any hosts that...

Configuring the Switch 3-110 Configuring IGMP Snooping and Query Parameters You can configure the switch to forward multicast traffic intelligently. Based on the IGMP query and report messages, the switch forwards traffic only to the ports that request multicast traffic. This prevents the switch fro...

Multicast Filtering 3-111 Web – Click IGMP Snooping, IGMP Configuration. Adjust the IGMP settings as required, and then click Apply. (The default settings are shown below.) CLI – This example modifies the settings for multicast filtering, and then displays the current status. Displaying Interfaces A...

Configuring the Switch 3-112 Web – Click IGMP Snooping, Multicast Router Port Information. Select the required VLAN ID from the scroll-down list to display the associated multicast routers. CLI – This example shows that Port 11 has been statically configured as a port attached to a multicast router....

Multicast Filtering 3-113 Web – Click IGMP Snooping, Static Multicast Router Port Configuration. Specify the interfaces attached to a multicast router, indicate the VLAN which will forward all the corresponding multicast traffic, and then click Add. After you have finished adding interfaces to the l...

Configuring the Switch 3-114 Web – Click IGMP Snooping, IP Multicast Registration Table. Select a VLAN ID and the IP address for a multicast service from the scroll-down lists. The switch will display all the interfaces that are propagating this multicast service. CLI – The following shows the multi...

4-1 Chapter 4: Command Line Interface This chapter describes how to use the Command Line Interface (CLI). Using the Command Line Interface Accessing the CLI When accessing the management interface for the switch over a direct connection to the server’s console port, or via a Telnet connection, the s...

Command Line Interface 4-2 To access the switch through a Telnet session, you must first set the IP address for the switch, and set the default gateway if you are managing the switch from a different IP subnet. For example, If your corporate network is connected to another network outside your offic...

Entering Commands 4-3 Entering Commands This section describes how to enter CLI commands. Keywords and Arguments A CLI command is a series of keywords and arguments. Keywords identify a command, and arguments specify configuration parameters. For example, in the command “show interfaces status ether...

Command Line Interface 4-4 Showing Commands If you enter a “?” at the command prompt, the system will display the first level of keywords for the current command class (Normal Exec or Privileged Exec) or configuration class (Global, ACL, Interface, Line, VLAN Database, or MSTP). You can also display...

Entering Commands 4-5 Negating the Effect of Commands For many configuration commands you can enter the prefix keyword “ no ” to cancel the effect of a command or reset the configuration to the default value. For example, the logging command will log system messages to a host server. To disable logg...

Command Line Interface 4-6 The system will now display the “Console#” command prompt. You can also enter Privileged Exec mode from within Normal Exec mode, by entering the enable command, followed by the privileged level password “super” (page 4-25). To enter Privileged Exec mode, enter the followin...

Entering Commands 4-7 To enter the other modes, at the configuration prompt type one of the following commands. Use the exit or end command to return to the Privileged Exec mode. For example, you can use the following commands to enter interface configuration mode, and then return to Privileged Exec...

Command Line Interface 4-8 Command Groups The system commands can be broken down into the functional groups shown below . The access mode shown in the following tables is indicated by these abbreviations: NE (Normal Exec) LC (Line Configuration) PE (Privileged Exec) VC (VLAN Database Configuration) ...

Line Commands 4-9 Line Commands You can access the onboard configuration program by attaching a VT100 compatible device to the server’s serial port. These commands are used to set communication parameters for the serial port or Telnet (i.e., a virtual terminal). line This command identifies a specif...

Command Line Interface 4-10 Command Usage Telnet is considered a virtual terminal connection and will be shown as “Vty” in screen displays such as show users. However, the serial communication parameters (e.g., databits) do not affect Telnet connections. Example To enter console line mode, enter the...

Command Line Interface 4-14 databits This command sets the number of data bits per character that are interpreted and generated by the console port. Use the no form to restore the default value. Syntax databits { 7 | 8 } no databits • 7 - Seven data bits per character. • 8 - Eight data bits per char...

Line Commands 4-15 Command Mode Line Configuration Command Usage Communication protocols provided by devices such as terminals and modems often require a specific parity bit setting. Example To specify no parity, enter this command: speed This command sets the terminal line’s baud rate. This command...

Command Line Interface 4-16 stopbits This command sets the number of the stop bits transmitted per byte. Use the no form to restore the default setting. Syntax stopbits { 1 | 2 } • 1 - One stop bit • 2 - Two stop bits Default Setting 1 stop bit Command Mode Line Configuration Example To specify 2 st...

General Commands 4-17 show line This command displays the terminal line’s parameters. Syntax show line [ console | vty ] • console - Console terminal line. • vty - Virtual terminal for remote console access (i.e., Telnet). Default Setting Shows all lines Command Mode Normal Exec, Privileged Exec Exa...

Command Line Interface 4-18 enable This command activates Privileged Exec mode. In privileged mode, additional commands are available, and certain commands display additional information. See “Understanding Command Modes” on page 4-5. Syntax enable level level - Privilege level to log into the devic...

General Commands 4-19 Command Usage The “>” character is appended to the end of the prompt to indicate that the system is in normal access mode. Example Related Commands enable (4-18) configure This command activates Global Configuration mode. You must enter this mode to modify any settings on th...

Command Line Interface 4-20 Example In this example, the show history command lists the contents of the command history buffer: The ! command repeats commands from the Execution command history buffer when you are in Normal Exec or Privileged Exec Mode, and commands from the Configuration command hi...

Command Line Interface 4-22 Command Usage The quit and exit commands can both exit the configuration program. Example This example shows how to quit a CLI session: System Management Commands These commands are used to control system logs, passwords, user names, browser configuration options, and dis...

System Management Commands 4-23 prompt This command customizes the CLI prompt. Use the no form to restore the default prompt. Syntax prompt string no prompt string - Any alphanumeric string to use for the CLI prompt. (Maximum length: 255 characters) Default Setting Console Command Mode Global Config...

Command Line Interface 4-24 User Access Commands The basic commands required for management access are listed in this section. This switch also includes other options for password checking via the console or a Telnet connection (page 4-9), user authentication via a remote authentication server (page...

System Management Commands 4-25 Example This example shows how the set the access level and password for a user. enable password After initially logging onto the system, you should set the Privileged Exec password. Remember to record it in a safe place. This command controls access to the Privileged...

Command Line Interface 4-26 IP Filter Commands management This command specifies the client IP addresses that are allowed management access to the switch through various protocols. Use the no form to restore the default setting. Syntax [ no ] management { all-client | http-client | snmp-client | tel...

System Management Commands 4-27 Example This example restricts management access to the indicated addresses. show management This command displays the client IP addresses that are allowed management access to the switch through various protocols. Syntax show management { all-client | http-client | s...

Command Line Interface 4-28 Web Server Commands ip http port This command specifies the TCP port number used by the Web browser interface. Use the no form to use the default port. Syntax ip http port port-number no ip http port port-number - The TCP port to be used by the browser interface. (Range: ...

Command Line Interface 4-30 Example Related Commands ip http secure-port (4-30)copy tftp https-certificate (4-55) ip http secure-port This command specifies the UDP port number used for HTTPS/SSL connection to the switch’s Web interface. Use the no form to restore the default port. Syntax ip http se...

System Management Commands 4-31 Command Mode Global Configuration Example Secure Shell Commands The Berkley-standard includes remote access tools originally designed for Unix systems. Some of these tools have also been implemented for Microsoft Windows and other environments. These tools, including ...

Command Line Interface 4-32 Default Setting Disabled Command Mode Global Configuration Command Usage • The SSH server supports up to four client sessions. The maximum number of client sessions includes both current Telnet sessions and SSH sessions. • The SSH server uses DSA or RSA for key exchange w...

System Management Commands 4-33 Example Related Commands exec-timeout (4-12)show ip ssh (4-34) ip ssh authentication-retries Use this command to configure the number of times the SSH server attempts to reauthenticate a user. Use the no form to restore the default setting. Syntax ip ssh authenticatio...

Command Line Interface 4-34 Example show ip ssh Use this command to display the connection settings used when authenticating client access to the SSH server. Command Mode Privileged Exec Example show ssh Use this command to display the current SSH server connections. Command Mode Privileged Exec Exa...

System Management Commands 4-35 Event Logging Commands logging on This command controls logging of error messages, sending debug or error messages to switch memory. The no form disables the logging process. Syntax [ no ] logging on Default Setting None Command Mode Global Configuration Command Usage...

Command Line Interface 4-36 logging history This command limits syslog messages saved to switch memory based on severity. The no form returns the logging of syslog messages to the default level. Syntax logging history { flash | ram } level no logging history { flash | ram } • flash - Event history s...

System Management Commands 4-37 logging host This command adds a syslog server host IP address that will receive logging messages. Use the no form to remove a syslog server host. Syntax [ no ] logging host host_ip_address host_ip_address - The IP address of a syslog server. Default Setting None Comm...

Command Line Interface 4-38 Example logging trap This command limits syslog messages saved to a remote server based on severity. Use the no form to return the remote logging of syslog messages to the default level. Syntax [ no ] logging trap level level - One of the level arguments listed below. Mes...

System Management Commands 4-39 show logging This command displays the logging configuration, along with any system and event messages stored in memory. Syntax show logging { flash | ram | sendmail | trap } • flash - Event history stored in flash memory (i.e., permanent memory). • ram - Event histor...

Command Line Interface 4-40 The following example displays settings for the trap function. Related Commands show logging sendmail (4-43) SMTP Alert Commands Configures SMTP event handling, and forwarding of alert messages to the specified SMTP servers and email recipients. Console#show logging trapS...

System Management Commands 4-41 logging sendmail host This command specifies SMTP servers that will be sent alert messages. Use the no form to remove an SMTP server. Syntax [ no ] logging sendmail host ip_address ip_address - IP address of an SMTP server that will be sent alert messages for event ha...

Command Line Interface 4-42 Command Usage The specified level indicates an event threshold. All events at this level or higher will be sent to the configured email recipients. (For example, using Level 7 will report all events from level 7 to level 0.) Example This example will send email alerts for...

System Management Commands 4-43 Command Mode Global Configuration Command Usage You can specify up to five recipients for alert messages. However, you must enter a separate command to specify each recipient. Example logging sendmail This command enables SMTP event handling. Use the no form to disabl...

Command Line Interface 4-44 Example Time Commands The system clock can be dynamically set by polling a set of specified time servers (NTP or SNTP), or by using information broadcast by local time servers. sntp client This command enables SNTP client requests for time synchronization from NTP or SNTP...

System Management Commands 4-45 Command Usage • The time acquired from time servers is used to record accurate dates and times for log events. Without SNTP, the switch only records the time starting from the factory default set at the last bootup (e.g., 00:00:00, Jan. 1, 2001). • This command enable...

Command Line Interface 4-46 Command Usage This command specifies time servers from which the switch will poll for time updates when set to SNTP client mode. The client will poll the time servers in the order specified until a response is received. It issues time synchronization requests based on the...

System Management Commands 4-47 sntp broadcast client This command synchronizes the switch’s clock based on time broadcast from time servers (using the multicast address 224.0.1.1). Use the no form to disable SNTP broadcast client mode. Syntax [ no ] sntp broadcast client Default Setting Disabled Co...

Command Line Interface 4-48 clock timezone This command sets the time zone for the switch’s internal clock. Syntax clock timezone name hour hours minute minutes { before-utc | after-utc } • name - Name of time zone, usually an acronym. (Range: 1-29 characters) • hours - Number of hours before/after ...

System Management Commands 4-49 Default Setting None Command Mode Privileged Exec Example This example shows how to set the system clock to 15:12:34, February 1st, 2002. show calendar This command displays the system clock. Default Setting None Command Mode Normal Exec, Privileged Exec Example Syste...

System Management Commands 4-53 Related Commands show startup-config (4-49) show system This command displays system information. Default Setting None Command Mode Normal Exec, Privileged Exec Command Usage • For a description of the items shown by this command, refer to “Displaying System Informati...

Command Line Interface 4-54 Command Mode Normal Exec, Privileged Exec Command Usage The session used to execute this command is indicated by a “*” symbol next to the Line (i.e., session) index number. Example show version This command displays hardware and software version information for the system...

Flash/File Commands 4-57 The following example shows how to download a configuration file: This example shows how to copy a secure-site certificate from an TFTP server. It then reboots the switch to activate the certificate: delete This command deletes a file or image. Syntax delete filename filenam...

Command Line Interface 4-58 dir This command displays a list of files in flash memory. Syntax dir [ boot-rom | config | opcode [: filename ]] The type of file or image to display includes: • boot-rom - Boot ROM (or diagnostic) image file. • config - Switch configuration file. • opcode - Run-time ope...

Command Line Interface 4-60 Related Commands dir (4-58)whichboot (4-59) Authentication Commands You can configure this switch to authenticate users logging into the system for management access using local or RADIUS authentication methods. You can also enable port-based authentication for network cl...

Authentication Commands 4-61 • RADIUS and TACACS+ logon authentication assigns a specific privilege level for each user name and password pair. The user name, password, and privilege level must be configured on the authentication server. • You can specify three authentication methods in a single com...

Authentication Commands 4-63 Example radius-server retransmit This command sets the number of retries. Use the no form to restore the default. Syntax radius-server retransmit number_of_retries no radius-server retransmit number_of_retries - Number of times the switch will try to authenticate logon a...

Command Line Interface 4-66 Example show tacacs-server This command displays the current settings for the TACACS+ server. Default Setting None Command Mode Privileged Exec Example Port Security Commands These commands can be used to disable the learning function or manually specify secure addresses ...

Authentication Commands 4-67 port security This command enables or configures port security. Use the no form without any keywords to disable port security. Use the no form with the appropriate keyword to restore the default settings for a response to security violation or for the maximum number of a...

Command Line Interface 4-68 Example The following example enables port security for port 5, and sets the response to a security violation to issue a trap message: Related Commands shutdown (4-89)mac-address-table static (4-122)show mac-address-table (4-123) 802.1x Port Authentication The switch supp...

Authentication Commands 4-69 Default Setting RADIUS Command Mode Global Configuration Example dot1x default This command sets all configurable dot1x global and port settings to their default values. Syntax dot1x default Command Mode Global Configuration Example dot1x max-req This command sets the ma...

Authentication Commands 4-71 Example dot1x re-authenticate This command forces re-authentication on all ports or a specific interface. Syntax dot1x re-authenticate interface interface • ethernet unit / port - unit - This is device 1. - port - Port number. Command Mode Privileged Exec Example dot1x r...

Command Line Interface 4-72 Default 60 seconds Command Mode Global Configuration Example dot1x timeout re-authperiod This command sets the time period after which a connected client must be re-authenticated. Syntax dot1x timeout re-authperiod seconds no dot1x timeout re-authperiod seconds - The numb...

Authentication Commands 4-73 Example show dot1x This command shows general port authentication related settings on the switch or a specific interface. Syntax show dot1x [ statistics ] [ interface interface ] interface • ethernet unit / port - unit - This is device 1. - port - Port number. Command Mo...

Command Line Interface 4-76 SNMP Commands SNMP Commands control access to this switch from management stations using the Simple Network Management Protocol (SNMP), as well as the error types sent to trap managers. snmp-server community This command defines the community access string for the Simple ...

SNMP Commands 4-79 Example Related Commands snmp-server enable traps (4-79) snmp-server enable traps This command enables this device to send Simple Network Management Protocol traps (SNMP notifications). Use the no form to disable SNMP notifications. Syntax [ no ] snmp-server enable traps [ authent...

Command Line Interface 4-80 snmp ip filter This command sets the IP addresses of clients that are allowed management access to the switch via SNMP. Use the no form the remove an IP address. Syntax [ no ] snmp ip filter ip_address subnet_mask • ip_address - An IP address indicating a client or group ...

SNMP Commands 4-81 show snmp This command checks the status of SNMP communications. Default Setting None Command Mode Normal Exec, Privileged Exec Command Usage This command provides information on the community access strings, counter information for SNMP input and output protocol data units, and w...

Command Line Interface 4-82 DHCP Commands These commands are used to configure Dynamic Host Configuration Protocol (DHCP) client. You can configure any VLAN interface to be automatically assigned an IP address via DHCP. DHCP Client ip dhcp client-identifier This command specifies the DCHP client ide...

DHCP Commands 4-83 ip dhcp restart client This command submits a BOOTP or DHCP client request. Default Setting None Command Mode Privileged Exec Command Usage • This command issues a BOOTP or DHCP client request for any IP interface that has been set to BOOTP or DHCP mode via the ip address command....

Command Line Interface 4-84 Interface Commands These commands are used to display or set communication parameters for an Ethernet port, aggregated link, or VLAN. interface This command configures an interface type and enter interface configuration mode. Use the no form to remove a trunk. Syntax inte...

Interface Commands 4-85 Command Mode Global Configuration Example To specify port 24, enter the following command: description This command adds a description to an interface. Use the no form to remove the description. Syntax description string no description string - Comment or a description to hel...

Command Line Interface 4-86 Default Setting • Auto-negotiation is enabled by default. • When auto-negotiation is disabled, the default speed-duplex setting is 100half for 100BASE-TX ports and 1000full for Gigabit Ethernet ports. Command Mode Interface Configuration (Ethernet, Port Channel) Command U...

Interface Commands 4-87 Command Usage • When auto-negotiation is enabled the switch will negotiate the best settings for a link based on the capabilities command. When auto-negotiation is disabled, you must manually specify the link attributes with the speed-duplex and flowcontrol commands. • If aut...

Command Line Interface 4-88 Command Usage When auto-negotiation is enabled with the negotiation command, the switch will negotiate the best settings for a link based on the capabilities command. When auto-negotiation is disabled, you must manually specify the link attributes with the speed-duplex an...

Interface Commands 4-89 Example The following example enables flow control on port 5. Related Commands negotiation (4-86)capabilities (4-87) shutdown This command disables an interface. To restart a disabled interface, use the no form. Syntax [ no ] shutdown Default Setting All interfaces are enable...

Command Line Interface 4-90 Default Setting Enabled for all portsPacket-rate limit: 500 packets per second Command Mode Interface Configuration (Ethernet) Command Usage • When broadcast traffic exceeds the specified threshold, packets above that threshold are dropped. • This command can enable or di...

Interface Commands 4-91 Example The following example clears statistics on port 5. show interfaces status This command displays the status for an interface. Syntax show interfaces status [ interface ] interface • ethernet unit / port - unit - This is device 1. - port - Port number. • port-channel ch...

Command Line Interface 4-92 Example show interfaces counters This command displays interface statistics. Syntax show interfaces counters [ interface ] interface • ethernet unit / port - unit - This is device 1 - port - Port number • port-channel channel-id (Value: 1) Default Setting Shows the counte...

Interface Commands 4-93 Example Related Commands show controllers ethernet-controller (4-109) show interfaces switchport This command displays the administrative and operational status of the specified interfaces. Syntax show interfaces switchport [ interface ] interface • ethernet unit / port - uni...

Mirror Port Commands 4-95 Mirror Port Commands This section describes how to mirror traffic from a source port to a target port. port monitor This command configures a mirror session. Use the no form to clear a mirror session. Syntax port monitor interface [ rx | tx | both ] no port monitor interfac...

Command Line Interface 4-96 Example The following example configures the switch to mirror all packets from port 6 to 11: show port monitor This command displays mirror information. Syntax show port monitor [ interface ] interface - ethernet unit / port (source port) • unit - Switch (unit 1) • port -...

Rate Limit Commands 4-97 Rate Limit Commands This function allows the network manager to control the maximum rate for traffic transmitted or received on an interface. Rate limiting is configured on interfaces at the edge of a network to limit traffic into or out of the network. Traffic that falls wi...

Command Line Interface 4-98 Link Aggregation Commands Ports can be statically grouped into an aggregate link (i.e., trunk) to increase the bandwidth of a network connection or to ensure fault recovery. Or you can use the Link Aggregation Control Protocol (LACP) to automatically negotiate a trunk lin...

Link Aggregation Commands 4-99 • However, if the port channel admin key is set, then the port admin key must be set to the same value for a port to be allowed to join a channel group. • If a link goes down, LACP port priority is used to select the backup link. channel-group This command adds a port ...

VDSL Commands 4-101 VDSL Commands These commands are used to to configure and display communication parameters for VDSL and Ethernet ports on the switch and connected CPEs. Command Function Mod e Page efm profile global Batch assigns profiles for speed to all the VDSL ports on the switch GC 4-102 ef...

Command Line Interface 4-102 efm profile global Use this command to batch assign profiles for speed to all the VDSL ports on the switch. Syntax efm profile global profile name profile name - Name of the profile. Default Setting Default Profile Command Mode Global Configuration Command Usage Assigns ...

VDSL Commands 4-103 2. A suffix of “A” in the profile name (e.g., S2-16-16A) indicates that this profile is for both VDSL and ADSL lines in a bundle. Profiles without a suffix of “A” in the profile name (e.g., S1-16-16) are for VDSL lines only. 3. The following profiles are recommended for use with ...

Command Line Interface 4-104 Example The following example assigns EFM profile S1-16-16 to VDSL port 1. Related Commands efm profile global (4-102) efm reset Use this command to reset the switch VDSL chipset or, if a CPE is connected, the CPE VDSL chipset. Syntax efm reset { local | remote } • local...

VDSL Commands 4-105 Command Mode Interface Configuration Command Usage Use this command to disable the VDSL chipset transmitter of a VDSL port that is not connected to a working CPE. In some unusual circumstances, the power emitted by VDSL ports can affect other VDSL ports. It is recommended that po...

Command Line Interface 4-106 efm interleave This command sets the interleave parameters for the selected VDSL port. Syntax efm interleave [ downstream M value ] [ upstream M value ] [ downstream I value ] [ upstream I value ] no efm interleave • M value – M is the interleaving depth index. Range: 0-...

VDSL Commands 4-109 efm pbo This command enables and disables power back-off on the selected VDSL port. Syntax [ no ] efm pbo Default Setting Enabled Command Mode Interface Configuration Command Usage If PBO is enabled, the power of transmission from the port will automatically be adjusted to ensure...

VDSL Commands 4-111 show controllers efm actual Use this command to display the current values of the VDSL link on a specific VDSL port. Syntax show controllers efm interface-id actual { dsrserrs | usrserrs | txpower | rxpower | snr | link } • interface-id - ID of the VDSL port. • dsrserrs - Display...

Command Line Interface 4-112 Related Commands show controllers efm admin (4-112)show controllers efm profile (4-112) show controllers efm admin Use this command to display the actual values of the VDSL link on a specific VDSL port. Syntax show controllers efm interface-id admin { dsrate | usrate } •...

VDSL Commands 4-113 Command Mode Privileged EXEC Command Usage See efm profile global (4-102) for the VDSL profiles shipped with the switch, and for the their upstream and downstream data rates. Examples This example displays VDSL profiles and link status for the switch’s VDSL ports. This example di...

Command Line Interface 4-114 show controllers efm status Use this command to display the VDSL link statistics and profile information on a specific VDSL port including link state, link duration, data rates, power levels, signal-to-noise ratio, and Reed-Solomon errors. Syntax show controllers efm sta...

VDSL Commands 4-115 This example displays the link status, uptime, profile name, downstream and upstream rates, and the number of link failures for the switch’s VDSL ports. Related Commands show controllers efm interface-id actualshow controllers efm interface-id admin show controllers efm remote et...

VDSL Commands 4-117 show controllers efm channel-performance This command displays the channel performance for the channels in a VDSL line. For details see “Displaying VDSL Interface Information” on page 3-66. Syntax show controllers efm channel-performance { vtu-r | vtu-c } [ fast | slow ] [ interf...

Command Line Interface 4-118 Example show controllers efm phy-table This command displays physical interface information for the selected VDSL port. For details see “Displaying VDSL Interface Information” on page 3-66. Syntax show controllers efm phy-table { vtu-r | vtu-c } [ interface ] • vtu-r – V...

VDSL Commands 4-119 Command Mode Privileged EXEC Example show controllers efm channel-table This command displays channel interface information for the selected VDSL port. For details see “Displaying VDSL Interface Information” on page 3-66. Syntax show controllers efm channel-table { vtu-r | vtu-c ...

Command Line Interface 4-122 Address Table Commands These commands are used to configure the address table for filtering specified addresses, displaying current entries, clearing the table, or setting the aging time. mac-address-table static This command maps a static address to a destination port i...

Spanning Tree Commands 4-125 show mac-address-table aging-time This command shows the aging time for entries in the address table. Default Setting None Command Mode Privileged Exec Example Spanning Tree Commands This section includes commands that configure the Spanning Tree Algorithm (STA) globally...

Spanning Tree Commands 4-129 Command Usage This command sets the maximum time (in seconds) a device can wait without receiving a configuration message before attempting to reconfigure. All device ports (except for designated ports) should receive configuration messages at regular intervals. Any port...

Command Line Interface 4-130 spanning-tree pathcost method This command configures the path cost method used for Rapid Spanning Tree. Use the no form to restore the default. Syntax spanning-tree pathcost method {l ong | short } no spanning-tree pathcost method • long - Specifies 32-bit based values ...

Spanning Tree Commands 4-133 Command Usage • You can enable this option if an interface is attached to a LAN segment that is at the end of a bridged LAN or to an end node. Since end nodes cannot cause forwarding loops, they can pass directly through to the spanning tree forwarding state. Specifying ...

VLAN Commands 4-137 VLAN Commands A VLAN is a group of ports that can be located anywhere in the network, but communicate as though they belong to the same physical segment. This section describes commands used to create VLAN groups, add port members, specify how VLAN tagging is used, and enable aut...

Command Line Interface 4-138 Example Related Commands show vlan (4-143) vlan This command configures a VLAN. Use the no form to restore the default settings or delete a VLAN. Syntax vlan vlan-id [ name vlan-name ] media ethernet [ state { active | suspend }] no vlan vlan-id [ name | state ] • vlan-i...

VLAN Commands 4-139 Configuring VLAN Interfaces interface vlan This command enters interface configuration mode for VLANs, which is used to configure VLAN parameters for a physical interface. Syntax interface vlan vlan-id vlan-id - ID of the configured VLAN. (Range: 1-4093, no leading zeroes) Defaul...

Command Line Interface 4-140 switchport mode This command configures the VLAN membership mode for a port. Use the no form to restore the default. Syntax switchport mode { trunk | hybrid } no switchport mode • trunk - Specifies a port as an end-point for a VLAN trunk. A trunk is a direct link between...

VLAN Commands 4-141 Command Usage When set to receive all frame types, any received frames that are untagged are assigned to the default VLAN. Example The following example shows how to restrict the traffic received on port 1 to tagged frames: Related Commands switchport mode (4-140) switchport ingr...

Command Line Interface 4-142 switchport native vlan This command configures the PVID (i.e., default VLAN ID) for a port. Use the no form to restore the default. Syntax switchport native vlan vlan-id no switchport native vlan vlan-id - Default VLAN ID for a port. (Range: 1-4093, no leading zeroes) De...

VLAN Commands 4-143 Command Mode Interface Configuration (Ethernet, Port Channel) Command Usage • A port, or a trunk with switchport mode set to hybrid , must be assigned to at least one VLAN as untagged. • If a trunk has switchport mode set to trunk (i.e., 1Q Trunk), then you can only assign an int...

Command Line Interface 4-144 Default Setting Shows all VLANs. Command Mode Normal Exec, Privileged Exec Example The following example shows how to display information for VLAN 1: Configuring Private VLANs pvlan Use this command in global configuration mode to enable or configure private VLAN. Use th...

Configuring Private VLANs 4-145 Command Usage A Private VLAN allows modification of the default VLAN to provide port-based security and isolation between ports within the VLAN. Data traffic on the downlink ports can only be forwarded to, and from, the uplink port. Private VLANs and normal VLANs can ...

Command Line Interface 4-146 Bridge Extension Commands This section describes how to display default configuration settings for the Bridge Extension MIB. show bridge-ext This command shows the configuration for bridge extension commands. Default Setting None Command Mode Privileged Exec Command Usag...

Priority Commands 4-147 Priority Commands The commands described in this section allow you to specify which data packets have greater precedence when traffic is buffered in the switch due to congestion. This switch supports CoS with four priority queues for each port. Data packets in a port’s high-p...

Command Line Interface 4-148 Command Mode Interface Configuration (Ethernet, Port Channel) Command Usage • The precedence for priority mapping is IP Port, IP Precedence or IP DSCP, and default switchport priority. • The default priority applies for an untagged frame received on a port set to accept ...

Priority Commands 4-149 Command Usage You can set the switch to service the queues based on a strict rule that requires all traffic in a higher priority queue to be processed before lower priority queues are serviced, or use Weighted Round-Robin (WRR) queuing that specifies a relative weight of each...

Priority Commands 4-151 show queue mode This command shows the current queue mode. Default Setting None Command Mode Privileged Exec Example show queue bandwidth This command displays the weighted round-robin (WRR) bandwidth allocation for the eight priority queues. Default Setting None Command Mode...

Command Line Interface 4-152 Command Mode Privileged Exec Example Priority Commands (Layer 3 and 4) map ip precedence (Global Configuration) This command enables IP precedence mapping (i.e., IP Type of Service). Use the no form to disable IP precedence mapping. Syntax [ no ] map ip precedence Defaul...

Command Line Interface 4-154 Command Usage • The precedence for priority mapping is IP Port, IP Precedence or IP DSCP, and default switchport priority. • IP Precedence and IP DSCP cannot both be enabled. Enabling one of these priority types will automatically disable the other type. Example The foll...

Priority Commands 4-155 Example The following example shows how to map IP DSCP value 1 to CoS value 0: map ip port (Global Configuration) Use this command to enable IP port mapping (i.e., class of service mapping for TCP/UDP sockets). Use the no form to disable IP port mapping. Syntax map ip port no...

Command Line Interface 4-156 show map ip precedence This command shows the IP precedence priority map. Syntax show map ip precedence interface interface • ethernet unit / port - unit - This is device 1. - port - Port number. • port-channel channel-id (Value: 1) Default Setting None Command Mode Priv...

Priority Commands 4-157 Default Setting None Command Mode Privileged Exec Example Related Commands map ip dscp (Global Configuration) (4-153)map ip dscp (Interface Configuration) (4-154) show map ip port Use this command to show the IP port priority map. Syntax show map ip port [ interface ] interfa...

Command Line Interface 4-158 Example The following shows that HTTP traffic has been mapped to CoS value 0: Related Commands map ip port (Interface Configuration) (4-155) Multicast Filtering Commands This switch uses IGMP (Internet Group Management Protocol) to query for any attached hosts that want ...

Multicast Filtering Commands 4-159 Default Setting Enabled Command Mode Global Configuration Example The following example enables IGMP snooping. ip igmp snooping vlan static This command adds a port to a multicast group. Use the no form to remove the port. Syntax [ no ] ip igmp snooping vlan vlan-i...

Command Line Interface 4-160 Default Setting IGMP Version 2 Command Mode Global Configuration Command Usage All systems on the subnet must support the same version. If there are legacy devices in your network that only support Version 1, you will also have to configure this switch to use Version 1.S...

Multicast Filtering Commands 4-161 show mac-address-table multicast This command shows known multicast addresses. Syntax show mac-address-table multicast [ vlan vlan-id ] [ user | igmp-snooping ] • vlan-id - VLAN ID (1 to 4094) • user - Display only the user-configured multicast entries. • igmp-snoo...

Command Line Interface 4-162 ip igmp snooping querier This command enables the switch as an IGMP querier. Use the no form to disable it. Syntax [ no ] ip igmp snooping querier Default Setting Enabled Command Mode Global Configuration Command Usage If enabled, the switch will serve as querier if elec...

Multicast Filtering Commands 4-163 Example The following shows how to configure the query count to 10: Related Commands ip igmp snooping query-max-response-time (4-163) ip igmp snooping query-interval This command configures the query interval. Use the no form to restore the default. Syntax ip igmp ...

Multicast Filtering Commands 4-165 Related Commands ip igmp snooping version (4-159) Static Multicast Routing Commands ip igmp snooping vlan mrouter This command statically configures a multicast router port. Use the no form to remove the configuration. Syntax [ no ] ip igmp snooping vlan vlan-id mr...

Command Line Interface 4-166 show ip igmp snooping mrouter This command displays information on statically configured and dynamically learned multicast router ports. Syntax show ip igmp snooping mrouter [ vlan vlan-id ] vlan-id - VLAN ID (Range: 1-4093) Default Setting Displays multicast router port...

IP Interface Commands 4-167 ip address This command sets the IP address for the currently selected VLAN interface. Use the no form to restore the default IP address. Syntax ip address { ip-address netmask | bootp | dhcp } no ip address • ip-address - IP address • netmask - Network mask for the assoc...

Command Line Interface 4-168 ip default-gateway This command establishes a static route between this switch and devices that exist on another network segment. Use the no form to remove the static route. Syntax ip default-gateway gateway no ip default-gateway gateway - IP address of the default gatew...

IP Interface Commands 4-169 show ip redirects This command shows the default gateway configured for this device. Default Setting None Command Mode Privileged Exec Example Related Commands ip default-gateway (4-168) ping This command sends ICMP echo request packets to another node on the network. Syn...

A-1 Appendix A: Software Specifications Software Features Authentication Local, RADIUS, TACACS, Port (802.1x), HTTPS, SSH, Port Security DHCP ClientPort Configuration 1000BASE-T: 10/100/1000 Mbps, half/full duplex1000BASE-SX/LX: 1000 Mbps, full duplex Flow Control Full Duplex: IEEE 802.3xHalf Duplex...

A-2 Software Specifications Management Features In-Band Management Telnet, Web-based HTTP or HTTPS, SNMP manager, or Secure Shell Out-of-Band Management RS-232 DB-9 console port Software Loading TFTP in-band or XModem out-of-band SNMP Management access via MIB databaseTrap management to specified ho...

A-3 Management Information Bases Management Information Bases Bridge MIB (RFC 1493)Entity MIB (RFC 2737)Ethernet MIB (RFC 2665)Ether-like MIB (RFC 1643)Extended Bridge MIB (RFC 2674)Extensible SNMP Agents MIB (RFC 2742)Forwarding Table MIB (RFC 2096)IGMP MIB (RFC 2933)Interface Group MIB (RFC 2233)I...

B-1 Appendix B: Troubleshooting Troubleshooting Chart Symptom Action Cannot connect using Telnet, Web browser, or SNMP software • Be sure you have configured the agent with a valid IP address, subnet mask and default gateway. • If you are trying to connect to the agent via the IP address for a tagge...

Glossary-1 Glossary Boot Protocol (BOOTP) BOOTP is used to provide bootup information for network devices, including IP address information, the address of the TFTP server that contains the devices system files, and the name of the boot file. Class of Service (CoS) CoS is supported by prioritizing p...

Glossary Glossary-2 GARP VLAN Registration Protocol (GVRP) Defines a way for switches to exchange VLAN information in order to register necessary VLAN members on ports along the Spanning Tree so that VLANs defined in each switch can work automatically over a Spanning Tree network. Generic Attribute ...

Glossary Glossary-5 Remote Authentication Dial-in User Service (RADIUS) RADIUS is a logon authentication protocol that uses software running on a central server to control access to RADIUS-compliant devices on the network. Remote Monitoring (RMON) RMON provides comprehensive network monitoring capab...

Glossary Glossary-6 Transmission Control Protocol/Internet Protocol (TCP/IP) Protocol suite that includes TCP as the primary transport protocol, and IP as the network layer protocol. Trivial File Transfer Protocol (TFTP) A TCP/IP protocol commonly used for software downloads. User Datagram Protocol ...

Index-1 Numerics 802.1x, port authentication 3-33, 4-68 A acceptable frame type 3-94, 4-140address table 3-73, 4-122 aging time 3-75, 4-125 B BOOTP 3-13, 4-167BPDU 3-76broadcast storm, threshold 3-48, 4-89 C Class of Service See CoS CLI, showing commands 4-4command line interface See CLI community s...